This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/ac124c-5bd3-4b15-b088-a18a0512776c/1/QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.mft
File: QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.mft (raw, json)
Hash identifier: ikVZuLThJ7zzrZPyFnOTDgMtWnYUIo2zYugB0GSqAr0=
Subject key identifier: DF:5C:4C:25:BC:82:EA:D9:DD:62:CE:BE:49:7F:97:E2:DB:43:0B:97
Authority key identifier: 40:6E:90:6F:82:B3:D5:15:56:59:DA:E4:D0:86:76:9E:F1:2A:82:14
Certificate issuer: /CN=406e906f82b3d5155659dae4d086769ef12a8214
Certificate serial: 019C41D8D11D57110293AC23C967E53E8396
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/ac124c-5bd3-4b15-b088-a18a0512776c/1/QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.mft
Manifest number: 12E5
Signing time: Mon 09 Feb 2026 10:00:54 +0000
Manifest this update: Mon 09 Feb 2026 10:00:54 +0000
Manifest next update: Tue 10 Feb 2026 10:00:54 +0000
Files and hashes: 1: LaPWaYnRdzPOHVggeMAoRuWpL4k.roa (hash: CbyTkBWUaIRYJheYloFSm5P53K+AiwdJChkgXRTNeqo=)
2: QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.crl (hash: nx7JuVbFE0BJvFfeYzwiPyQiGOjE1zjX1FOTyGmqHBY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/ac124c-5bd3-4b15-b088-a18a0512776c/1/QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/ac124c-5bd3-4b15-b088-a18a0512776c/1/QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 10:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:41:d8:d1:1d:57:11:02:93:ac:23:c9:67:e5:3e:83:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=406e906f82b3d5155659dae4d086769ef12a8214
Validity
Not Before: Feb 9 10:00:54 2026 GMT
Not After : Feb 10 10:00:54 2026 GMT
Subject: CN=df5c4c25bc82ead9dd62cebe497f97e2db430b97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:32:7b:e3:73:ab:48:65:0d:c0:17:ff:3b:80:
dd:cb:2f:37:e7:87:c8:33:0e:e6:f8:c3:07:a3:ac:
9d:74:ad:56:bb:36:dd:38:cd:50:9f:ab:45:ac:50:
11:77:8e:c8:cd:eb:1f:9c:77:6c:13:8b:47:eb:df:
7f:41:27:d9:53:a0:66:39:cc:fb:5a:d0:0e:74:3e:
c7:46:c1:ae:e7:3e:fc:53:d1:c8:dd:2f:e4:d6:39:
2f:a2:56:4b:76:15:a7:94:4e:66:81:e9:61:f9:2c:
ec:0a:ec:9d:51:35:df:9f:b2:82:94:53:b2:12:64:
c9:b0:32:76:dd:a3:63:bc:fe:3f:de:30:1d:94:5c:
a9:c3:bd:98:2a:b6:34:a7:ab:07:6a:5e:a0:b3:90:
99:8a:13:be:9e:28:28:fd:eb:72:8a:91:f3:25:59:
52:a9:89:db:32:e5:cc:a8:93:25:2a:6c:1a:1a:62:
72:ed:a7:24:4b:27:a0:58:99:97:18:f6:bf:a7:15:
e2:ab:89:cf:6e:cd:22:50:6b:70:41:18:e0:88:51:
15:d4:68:2a:10:88:0f:70:be:d5:43:55:ea:0b:29:
f9:a4:d9:4d:e2:bc:e5:bc:0f:bb:59:5b:18:55:15:
f6:12:63:9f:41:a5:77:4e:af:c3:46:68:dd:6f:34:
5d:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:5C:4C:25:BC:82:EA:D9:DD:62:CE:BE:49:7F:97:E2:DB:43:0B:97
X509v3 Authority Key Identifier:
keyid:40:6E:90:6F:82:B3:D5:15:56:59:DA:E4:D0:86:76:9E:F1:2A:82:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/ac124c-5bd3-4b15-b088-a18a0512776c/1/QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/ac124c-5bd3-4b15-b088-a18a0512776c/1/QG6Qb4Kz1RVWWdrk0IZ2nvEqghQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:4c:8d:2e:a1:5e:52:24:b8:de:3d:b6:4c:ae:13:96:5a:0e:
c9:aa:e7:43:82:a8:9a:37:11:5e:1f:77:28:95:84:bf:11:bc:
d5:b6:32:85:92:86:86:f6:c7:12:e8:b3:06:7c:8e:35:73:61:
49:e6:f8:05:8c:29:ab:09:31:05:a9:58:79:b4:6d:28:36:e4:
13:58:2c:56:88:e0:b6:06:7e:66:3e:7a:47:0d:8b:8c:07:7e:
54:72:6d:88:39:7c:44:77:a2:6a:b2:81:35:2d:d7:10:b4:dc:
ed:0d:a7:8b:e3:38:43:38:c0:5d:54:95:ad:48:1f:11:45:13:
c1:70:40:3c:30:dd:fd:72:cd:65:be:52:c4:5e:b5:0d:98:27:
65:9e:54:91:88:c1:02:c5:77:35:b4:71:e0:de:fd:b5:ca:71:
94:00:30:1b:b2:27:02:cf:f1:9e:f3:f2:ee:68:38:a2:cb:b8:
d6:b1:83:85:f6:34:87:c7:16:c2:31:3c:bf:46:61:dc:43:01:
8a:07:2c:57:bb:94:c4:f8:6d:ee:98:dd:37:34:0c:11:39:ec:
b6:a9:a2:03:79:ec:cf:68:56:be:24:b6:37:4a:e5:55:ac:3b:
75:12:83:f4:4f:e3:3d:90:5d:c8:e7:8b:22:99:99:3f:4c:72:
ca:e1:fb:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxB2NEdVxECk6wjyWflPoOWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwNmU5MDZmODJiM2Q1MTU1NjU5ZGFlNGQwODY3NjllZjEy
YTgyMTQwHhcNMjYwMjA5MTAwMDU0WhcNMjYwMjEwMTAwMDU0WjAzMTEwLwYDVQQD
EyhkZjVjNGMyNWJjODJlYWQ5ZGQ2MmNlYmU0OTdmOTdlMmRiNDMwYjk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvzJ743OrSGUNwBf/O4Ddyy8354fI
Mw7m+MMHo6yddK1WuzbdOM1Qn6tFrFARd47IzesfnHdsE4tH699/QSfZU6BmOcz7
WtAOdD7HRsGu5z78U9HI3S/k1jkvolZLdhWnlE5mgelh+SzsCuydUTXfn7KClFOy
EmTJsDJ23aNjvP4/3jAdlFypw72YKrY0p6sHal6gs5CZihO+nigo/etyipHzJVlS
qYnbMuXMqJMlKmwaGmJy7ackSyegWJmXGPa/pxXiq4nPbs0iUGtwQRjgiFEV1Ggq
EIgPcL7VQ1XqCyn5pNlN4rzlvA+7WVsYVRX2EmOfQaV3Tq/DRmjdbzRd3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN9cTCW8gurZ3WLOvkl/l+LbQwuXMB8GA1UdIwQY
MBaAFEBukG+Cs9UVVlna5NCGdp7xKoIUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUc2UWI0S3oxUlZXV2RyazBJWjJudkVxZ2hRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9hYzEyNGMtNWJkMy00YjE1LWIwODgt
YTE4YTA1MTI3NzZjLzEvUUc2UWI0S3oxUlZXV2RyazBJWjJudkVxZ2hRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC9hYzEyNGMtNWJkMy00YjE1LWIwODgtYTE4YTA1MTI3NzZj
LzEvUUc2UWI0S3oxUlZXV2RyazBJWjJudkVxZ2hRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEUyNLqFe
UiS43j22TK4TlloOyarnQ4KomjcRXh93KJWEvxG81bYyhZKGhvbHEuizBnyONXNh
Seb4BYwpqwkxBalYebRtKDbkE1gsVojgtgZ+Zj56Rw2LjAd+VHJtiDl8RHeiarKB
NS3XELTc7Q2ni+M4QzjAXVSVrUgfEUUTwXBAPDDd/XLNZb5SxF61DZgnZZ5UkYjB
AsV3NbRx4N79tcpxlAAwG7InAs/xnvPy7mg4osu41rGDhfY0h8cWwjE8v0Zh3EMB
igcsV7uUxPht7pjdNzQMETnstqmiA3nsz2hWviS2N0rlVaw7dRKD9E/jPZBdyOeL
IpmZP0xyyuH7QA==
-----END CERTIFICATE-----
Generated at Mon Feb 9 16:57:19 2026 by rpki-client